stacker.news/pages/api
SatsAllDay 15f9950477
Store hashed and salted email addresses (#1111)
* first pass of hashing user emails

* use salt

* add a salt to .env.development (prod salt needs to be kept a secret)
* move `hashEmail` util to a new util module

* trigger a one-time job to migrate existing emails via the worker

so we can use the salt from an env var

* move newsletter signup

move newsletter signup to prisma adapter create user with email code path
so we can still auto-enroll email accounts without having to persist the email address
in plaintext

* remove `email` from api key session lookup query

* drop user email index before dropping column

* restore email column, just null values instead

* fix function name

* fix salt and hash raw sql statement

* update auth methods email type in typedefs from str to bool

* remove todo comment

* lowercase email before hashing during migration

* check for emailHash and email to accommodate migration window

update our lookups to check for a matching emailHash, and then a matching
email, in that order, to accommodate the case that a user tries to login
via email while the migration is running, and their account has not yet been migrated

also update sndev to have a command `./sndev email` to launch the mailhog inbox in your browser

also update `./sndev login` to hash the generated email address and insert it into the db record

* update sndev help

* update awards.csv

* update the hack in next-auth to re-use the email supplied on input to `getUserByEmail`

* consolidate console.error logs

* create generic open command

---------

Co-authored-by: Keyan <34140557+huumn@users.noreply.github.com>
Co-authored-by: keyan <keyan.kousha+huumn@gmail.com>
2024-05-04 18:06:15 -05:00
..
auth Store hashed and salted email addresses (#1111) 2024-05-04 18:06:15 -05:00
lnurlp/[username] Support LNURL-verify (#1103) 2024-04-23 20:28:25 -05:00
log Use module path aliases (#938) 2024-03-19 19:37:31 -05:00
nostr Use module path aliases (#938) 2024-03-19 19:37:31 -05:00
ots Use module path aliases (#938) 2024-03-19 19:37:31 -05:00
daily.js Use module path aliases (#938) 2024-03-19 19:37:31 -05:00
graphql.js Store hashed and salted email addresses (#1111) 2024-05-04 18:06:15 -05:00
lnauth.js Use module path aliases (#938) 2024-03-19 19:37:31 -05:00
lnwith.js Use module path aliases (#938) 2024-03-19 19:37:31 -05:00
site.webmanifest.js Remove orientation from manifest (#483) 2023-09-11 14:58:41 -05:00
web-app-origin-association.js Make the web manifest dynamic to incorporate preferred color scheme (#398) 2023-08-15 12:58:27 -05:00